Yet another reason why Token Exchange is dangerous π€―π±
"Bing is allowed to issue Office tokens for any logged-on user"
https://twitter.com/hillai/status/1641146523990753290
WeChat ID
aaronpk_tv
-
-
Well that's a sentence I never thought could exist.
"A request for comment from Twitterβs press office was met with an automated reply containing a poo emoji, a new policy announced by Musk this month." -
Feature request for all calendar apps:
Let me temporarily switch my calendar into a different timezone so I can better plan events in my home timezone when I am traveling.
This is why I was using a paper planner in 2019. -
Ignore this post, I am just testing some #ActivityPub hashtag stuff
-
Every time i use my Windows computer I feel like I'm stuck under water and every time i press a button some other button gets pressed instead.
I'm sure it's fine if you're used to it, but wow I just feel incompetent trying to use it. -
I wrote up some thoughts about how Bluesky can/should support OAuth, both for applications to access users' accounts, as well as allowing users to log in to their bsky.social account using their own website!
https://aaronparecki.com/2023/03/09/5/bluesky-and-oauth -
I really need to remember that virtual presentations suck way more energy out of me than in-person events do, and I really need to not schedule 4-hour long sessions on back to back days.
-
It's absolutely wild to me that companies will mail me a postcard a few weeks after an Amazon purchase and offer a $150 gift card to leave a review! Is that really profitable? Are they actually going to make back $150 because of my one review?
-
I'm glad to see that BlueSky supports custom domains! I have zero interest in sitting on a username in the bluesky namespace. Setting it up was roughly the same as pointing your own domain to a hosting provider, and a lot easier than Mastodon/ActivityPub!
-
This is a post I wrote on my website. With any luck, this will be posted to my BlueSky account too!
-
another day, another account takeover caused by an open redirector and the OAuth Implicit flow π«
https://salt.security/blog/traveling-with-oauth-account-takeover-on-booking-com -
Whoever saw these trucks and was like "hey, the FAA rule that prohibits flying drones over people doesn't apply to people inside stationary vehicles" and then flew a drone down the highway deserves a raise https://twitter.com/kgwnews/status/1629221057558376448
-
New House Files episode is up! Come take a tour of our soggy plywood castle!
https://youtu.be/UmVmC22tLtk -
It's okay, I didn't really need to use Twitter today anyway.
-
I'm a big fan of using more secure two-factor authentication methods like a security key or TouchID, but I will admit I never expected charging people to use SMS would be a viable strategy to get them off it π https://blog.twitter.com/en_us/topics/product/2023/an-update-on-two-factor-authentication-using-sms-on-twitter
-
π we have a roof! π
Episode 6 of The House Files is out! More talk about designing our kitchen and countertops, and starting to work on the low voltage wiring designs!
https://youtu.be/w6TaPWIVPs8 -
I've given many talks about how mobile apps can't be deployed with a secret, and using Twitter's 2013 "hacks" as an example. I'm just going to leave this completely unrelated string of random characters here for no particular reason
GgDYlkSvaPxGxC4X8liwpUoqKwwr3lCADbz8A7ADU -
PSA: If you use Twitter to sign in to stuff, you should double check you have another way to get in to those accounts asap. With Twitter charging ??? for API access next week, you have no way of knowing whether the apps you use are going to pay that.
-
Okay shiny black fingernails were fun but wow gel nail polish is really time consuming and messy to remove!
